How Frontier Model Agents Accidentally Do Offensive Security
OpenAI - Hugging Face - Model evaluation security incident
Aug 16, 202612 min read
Command Palette
Search for a command to run...
Latest articles
Adapting Matt Pocock's grill-with-docs skill to create a Threat Modeling skill
I was working on a new app and came across Matt Pocock's /grill-with-docs skill that works as a structured interrogation tool that stress-tests your plan against your project's domain model, cross-ref
May 23, 20265 min read
One MCP Server Over Six Scanners: Security Posture as a Queryable API
Building a normalised finding schema across six scanners and an MCP layer that lets developers, security engineers, and CI pipelines query, fix, and verify vulnerabilities, all from the tools they already have open.
May 19, 202633 min read
Pipeline Security and Supply Chain Risk: Closing the Gap Between AppSec and CloudSec
Why the assumption that CI/CD is a trusted internal tool has already cost organisations dearly
May 19, 202612 min read
Attacking Kubernetes: Offensive Recon and Attack Path Analysis with CDK, Kubehound, and Kubescape
Part 1 - Lab setup, attacker simulation, and finding exploitable misconfigurations
May 14, 202612 min read
Securing AI Models: Understanding Threats and Testing Strategies
Securing AI: Microsoft Shares Key Research Findings
Aug 24, 20255 min read
A Comprehensive Guide to the EU Cyber Resilience Act (CRA) for Manufacturers
EU Cyber Resilience Act Explained by a Cybersecurity Professional
Aug 23, 202510 min read
AppSec Is Drowning in Noise — What Are We Actually Protecting?
Introduction Application security was supposed to be a safety net. Lately, it feels more like quicksand. Modern AppSec teams are swamped by an endless stream of alerts. The report found on thehackernews.com prompted me to think about this issue (http...
Jun 2, 20254 min read
Threat Modeling: A Complete How-To Guide
Identify and manage security risks in software architecture
Dec 14, 202414 min read